A small issue with the article: this is not true about the GDPR. Asking for permission is just one way to do it. This small error is a shame because it's aligned with Big Tech disinformation on the topic.
But with that nitpick in mind, read the article, it's great.